Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat(helm): update external-secrets ( 0.9.14 → 0.10.3 ) #147

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat(helm): update external-secrets ( 0.9.14 → 0.10.3 ) #147

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 20, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
external-secrets minor 0.9.14 -> 0.10.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

external-secrets/external-secrets (external-secrets)

v0.10.3

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.10.3
Image: ghcr.io/external-secrets/external-secrets:v0.10.3-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.10.3-ubi-boringssl

What's Changed

New Contributors

Full Changelog: external-secrets/external-secrets@v0.10.2...v0.10.3

v0.10.2

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.10.2
Image: ghcr.io/external-secrets/external-secrets:v0.10.2-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.10.2-ubi-boringssl

What's Changed

Full Changelog: external-secrets/external-secrets@v0.10.1...v0.10.2

v0.10.1

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.10.1
Image: ghcr.io/external-secrets/external-secrets:v0.10.1-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.10.1-ubi-boringssl

What's Changed

New Contributors

Full Changelog: external-secrets/external-secrets@v0.10.0...v0.10.1

v0.10.0

Compare Source

⚠️ :red-alert: BREAKING CHANGE :red-alert: ⚠️

  • Webhook Generator
    Webhook generator labels have changed from generators.external-secrets.io/type: webhook to external-secrets.io/type: webhook.

  • Webhook Provider
    Webhook provider now can only use secrets that are labeled with external-secrets.io/type: webhook. This enforces explicit setup for webhook secrets by users.

Fixing the issue:

add the label for the secret used by the webhook:

apiVersion: v1
kind: Secret
metadata:
  name: your-secret
  labels:
    external-secrets.io/type: webhook ### <<<<<<<<<<<<< ADD THIS
data:
...

Image: ghcr.io/external-secrets/external-secrets:v0.10.0
Image: ghcr.io/external-secrets/external-secrets:v0.10.0-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.10.0-ubi-boringssl

What's Changed

New Contributors

Full Changelog: external-secrets/external-secrets@v0.9.20...v0.10.0

v0.9.20

Compare Source

Image: ghcr.io/external-secrets/external-secrets:v0.9.20
Image: ghcr.io/external-secrets/external-secrets:v0.9.20-ubi
Image: ghcr.io/external-secrets/external-secrets:v0.9.20-ubi-boringssl

What's Changed

Configuration

📅 Schedule: Branch creation - "on saturday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions GitHub Actions
Copy link

github-actions bot commented Apr 20, 2024 •
edited
Loading 

--- HelmRelease: security/external-secrets ClusterRole: security/external-secrets-cert-controller

+++ HelmRelease: security/external-secrets ClusterRole: security/external-secrets-cert-controller

@@ -20,15 +20,23 @@

   - patch
 - apiGroups:
   - admissionregistration.k8s.io
   resources:
   - validatingwebhookconfigurations
   verbs:
-  - get
   - list
   - watch
+  - get
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - validatingwebhookconfigurations
+  resourceNames:
+  - secretstore-validate
+  - externalsecret-validate
+  verbs:
   - update
   - patch
 - apiGroups:
   - ''
   resources:
   - endpoints
--- HelmRelease: security/external-secrets ClusterRole: security/external-secrets-controller

+++ HelmRelease: security/external-secrets ClusterRole: security/external-secrets-controller

@@ -36,23 +36,26 @@

   - clusterexternalsecrets/status
   - clusterexternalsecrets/finalizers
   - pushsecrets
   - pushsecrets/status
   - pushsecrets/finalizers
   verbs:
+  - get
   - update
   - patch
 - apiGroups:
   - generators.external-secrets.io
   resources:
   - acraccesstokens
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
+  - githubaccesstokens
   - passwords
   - vaultdynamicsecrets
+  - webhooks
   verbs:
   - get
   - list
   - watch
 - apiGroups:
   - ''
--- HelmRelease: security/external-secrets ClusterRole: security/external-secrets-view

+++ HelmRelease: security/external-secrets ClusterRole: security/external-secrets-view

@@ -26,13 +26,15 @@

   - generators.external-secrets.io
   resources:
   - acraccesstokens
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
+  - githubaccesstokens
   - passwords
   - vaultdynamicsecrets
+  - webhooks
   verbs:
   - get
   - watch
   - list
 
--- HelmRelease: security/external-secrets ClusterRole: security/external-secrets-edit

+++ HelmRelease: security/external-secrets ClusterRole: security/external-secrets-edit

@@ -27,14 +27,16 @@

   - generators.external-secrets.io
   resources:
   - acraccesstokens
   - ecrauthorizationtokens
   - fakes
   - gcraccesstokens
+  - githubaccesstokens
   - passwords
   - vaultdynamicsecrets
+  - webhooks
   verbs:
   - create
   - delete
   - deletecollection
   - patch
   - update
--- HelmRelease: security/external-secrets Deployment: security/external-secrets-cert-controller

+++ HelmRelease: security/external-secrets Deployment: security/external-secrets-cert-controller

@@ -34,23 +34,26 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.9.14
+        image: ghcr.io/external-secrets/external-secrets:v0.10.3
         imagePullPolicy: IfNotPresent
         args:
         - certcontroller
         - --crd-requeue-interval=5m
         - --service-name=external-secrets-webhook
         - --service-namespace=security
         - --secret-name=external-secrets-webhook
         - --secret-namespace=security
         - --metrics-addr=:8080
         - --healthz-addr=:8081
+        - --loglevel=info
+        - --zap-time-encoding=epoch
+        - --enable-partial-cache=true
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
         readinessProbe:
           httpGet:
--- HelmRelease: security/external-secrets Deployment: security/external-secrets

+++ HelmRelease: security/external-secrets Deployment: security/external-secrets

@@ -34,16 +34,19 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.9.14
+        image: ghcr.io/external-secrets/external-secrets:v0.10.3
         imagePullPolicy: IfNotPresent
         args:
         - --concurrent=1
         - --metrics-addr=:8080
+        - --loglevel=info
+        - --zap-time-encoding=epoch
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
+      dnsPolicy: ClusterFirst
 
--- HelmRelease: security/external-secrets Deployment: security/external-secrets-webhook

+++ HelmRelease: security/external-secrets Deployment: security/external-secrets-webhook

@@ -34,22 +34,24 @@

             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
           runAsUser: 1000
           seccompProfile:
             type: RuntimeDefault
-        image: ghcr.io/external-secrets/external-secrets:v0.9.14
+        image: ghcr.io/external-secrets/external-secrets:v0.10.3
         imagePullPolicy: IfNotPresent
         args:
         - webhook
         - --port=10250
         - --dns-name=external-secrets-webhook.security.svc
         - --cert-dir=/tmp/certs
         - --check-interval=5m
         - --metrics-addr=:8080
         - --healthz-addr=:8081
+        - --loglevel=info
+        - --zap-time-encoding=epoch
         ports:
         - containerPort: 8080
           protocol: TCP
           name: metrics
         - containerPort: 10250
           protocol: TCP

@github-actions GitHub Actions
Copy link

github-actions bot commented Apr 20, 2024 •
edited
Loading 

--- kubernetes/apps/security/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: security/external-secrets

+++ kubernetes/apps/security/external-secrets/app Kustomization: flux-system/external-secrets HelmRelease: security/external-secrets

@@ -13,13 +13,13 @@

     spec:
       chart: external-secrets
       sourceRef:
         kind: HelmRepository
         name: external-secrets
         namespace: flux-system
-      version: 0.9.14
+      version: 0.10.3
   install:
     remediation:
       retries: 3
   interval: 30m
   maxHistory: 2
   uninstall:

@renovate renovate bot changed the title fix(helm): update external-secrets ( 0.9.14 → 0.9.16 ) fix(helm): update external-secrets ( 0.9.14 → 0.9.17 ) May 1, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from bb01b3d to 5ff08af Compare May 1, 2024 19:17
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from 5ff08af to ee03f0c Compare May 14, 2024 12:01
@renovate renovate bot changed the title fix(helm): update external-secrets ( 0.9.14 → 0.9.17 ) fix(helm): update external-secrets ( 0.9.14 → 0.9.18 ) May 14, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from ee03f0c to baf7e7b Compare June 4, 2024 21:19
@renovate renovate bot changed the title fix(helm): update external-secrets ( 0.9.14 → 0.9.18 ) fix(helm): update external-secrets ( 0.9.14 → 0.9.19 ) Jun 4, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from baf7e7b to d4b3098 Compare July 6, 2024 19:43
@renovate renovate bot changed the title fix(helm): update external-secrets ( 0.9.14 → 0.9.19 ) fix(helm): update external-secrets ( 0.9.14 → 0.9.20 ) Jul 6, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from d4b3098 to 978002c Compare August 3, 2024 10:09
@renovate renovate bot changed the title fix(helm): update external-secrets ( 0.9.14 → 0.9.20 ) feat(helm): update external-secrets ( 0.9.14 → 0.10.0 ) Aug 3, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from 978002c to 2f292bd Compare August 28, 2024 08:23
@renovate renovate bot changed the title feat(helm): update external-secrets ( 0.9.14 → 0.10.0 ) feat(helm): update external-secrets ( 0.9.14 → 0.10.1 ) Aug 28, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from 2f292bd to b02a9a7 Compare August 28, 2024 19:10
@renovate renovate bot changed the title feat(helm): update external-secrets ( 0.9.14 → 0.10.1 ) feat(helm): update external-secrets ( 0.9.14 → 0.10.2 ) Aug 28, 2024
@renovate renovate bot changed the title feat(helm): update external-secrets ( 0.9.14 → 0.10.2 ) feat(helm): update external-secrets ( 0.9.14 → 0.10.3 ) Sep 9, 2024
@renovate renovate bot force-pushed the renovate/external-secrets-0.x branch from b02a9a7 to 7b880bf Compare September 9, 2024 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
area/kubernetes renovate/helm type/patch
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants